Public-channel cryptography based on mutual chaos pass filters 
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We study the mutual coupling of chaotic lasers and observe both experimentally and in numeric 
simulations, that there exists a regime of parameters for which two mutually coupled chaotic lasers 
establish isochronal synchronization, while a third laser coupled unidirectionally to one of the pair, 
does not synchronize. We then propose a cryptographic scheme, based on the advantage of mutual- 
coupling over unidirectional coupling, where all the parameters of the system are public knowledge. 
We numerically demonstrate that in such a scheme the two communicating lasers can add a message 
signal (compressed binary message) to the transmitted coupling signal, and recover the message in 
both directions with high fidelity by using a mutual chaos pass filter procedure. An attacker however, 
fails to recover an errorless message even if he amplifies the coupling signal. 

PACS numbers: 05.45.Vx, 42.65. Sf, 42.55.Px 



Coupled semiconductor lasers have been studied exten- 
sively in recent years, due to their inherent non-linearity 
and chaotic dynamics. Chaos synchronization for two 
unidirectionally coupled lasers, each of which also has 
self-feedback from an external cavity, has been demon- 
strated experimentally and theoretically in [i|, Q, 01 ■ In 
addition, mutually coupled semiconductor lasers were 
also studied extensively 0,0,001' ^^^^ revealed different 
and interesting dynamics. Chaos synchronization has at- 
tracted even more interest recently, because of its poten- 
tial application in optical secret communication systems 

In this letter the synchronization properties of mutu- 
ally coupled versus unidirectionally coupled lasers are an- 
alyzed and compared. We show that there exists a regime 
in the coupling parameters space for which the mutu- 
ally coupled lasers synchronize very well, yet a unidirec- 
tionally coupled laser does not. Thus in an appHcation 
in which synchronization is desirable, mutually coupled 
lasers have an advantage. 

We use this result to propose a secret communication 
scheme over a public-channel based on this advantage 
of mutual coupling over unidirectional coupling. We em- 
phasize the pubHc channel nature of the proposed scheme 
and the advantages this brings to cryptographic commu- 
nication systems that make use of chaos synchronization. 
For unidirectionally coupled laser, chaos synchronization 
cryptography has been based on a private-key procedure, 
where the two communicating parties have a common se- 
cret key prior to the communication process, which they 
use to encrypt the message they wish to transmit. The 
unidirectionally coupled lasers are usually synchronized 
in a master-slave configuration, and the secret key gener- 
ally consists of the system's parameters \^. The system 
parameters provide a private key because the two com- 
municating lasers must have identical (or nearly identi- 
cal) parameters, or else synchronization is impossible. In 
this letter we propose an all-optical pu6Zic-channel cryp- 
tographic system, in which there is no need to conceal 
any of the system's parameters, or to exchange private 



information prior to the public-channel communication 
process. 

In our proposed system, the two communicating lasers 
are mutually coupled in such a way that they exhibit 
isochronal synchronization, in which there is no delay 
in their synchronized signals. Stable isochronal synchro- 
nization is achieved due to the self-feedback of each laser 
as described in [llj. Message encryption is accomplished 
by adding a low amplitude binary message to the chaotic 
laser fluctuations so that the ensuing transmitted signal 
still appears to be chaotic and random. Both lasers are 
allowed to send simultaneously, independent messages to 
each other and the messages are independently recovered 
at both ends of the communication line, ensuring bidirec- 
tional information flow. At the receiving end, both lasers 
use a chaos pass fllter procedure to decode the message 
from the received chaotic signal which we will call a "mu- 
tual chaos pass fllter" procedure, denoted MCPF. 

Communication security is based on the fact that a 
third laser, labeled the "attacker", who tries to synchro- 
nize himself to the transmitted signals, is disadvantaged 
compared to the mutually coupled lasers, and although 
he can manage to partly recover the message, he has con- 
siderably more error bits in his recovered message, and so 
his eavesdropping attack can be considered unsuccessful. 
The use of MCPF provides two novel and distinct advan- 
tages: it is public-key, i.e. it does not require a secret-key 
prior to communication, and it allows for simultaneous 
bidirectional communication. 

Our experimental setup is schematically depicted in 
Fig. m where two mutually coupled external feedback 
lasers A and B represent the communicating pair, and 
the third laser C which is identically conflgured but cou- 
pled unidirectionally to one of the pair represents the 
attacker. In the experiments we use 3 single-mode lasers, 
A, B and C, emitting at 660 nm and operating close to 
their threshold. The temperature of each laser is sta- 
bilized to better than O.OIK and all are subjected to a 
similar optical feedback. The length of the external cav- 
ity is equal for all lasers and is set to 180 cm (round 
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Figure 1: Schematic diagram of the experimental setup. 
Lasers A and B are mutually coupled, and C, the attacker, is 
unidirectionally coupled. BS - beam splitters; PBS - polar- 
ization beam splitters; OD - optical isolator; PD - photode- 
tectors. 
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Figure 3: Success or failure of synchronization for the parties 
and the attacker for a range of parameter values k, feedback 
strength, and a , coupling strength. 
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Figure 2: Correlation coefficient histograms for intensity 
traces divided into 10ns segments, for the cases of mutual 
and unidirectional coupling. The total feedback strength is 
equal in all cases. 



trip time 12 ns). The feedback strength of each laser is 
adjusted using a A/4 wave plate and a polarizing beam 
splitter. The two lasers (A and B) are mutually cou- 
pled by injecting a fraction of each one's output power to 
the other. CoupHng powers are adjusted using a neutral 
density filter. The attacker laser (C), is coupled unidi- 
rectionally to one of the mutually coupled lasers, with 
unidirectionality ensured by an optical diode (-33 dB). 
All the coupling optical paths are set to be equal the 
self feedback round trip path. Three fast photodetectors 
(response time < 500 ps) are used to monitor the laser in- 
tensities which are simultaneously recorded with a digital 
oscilloscope (500MHz, IGS/s). 

For the case of unidirectionally coupled lasers two 
types of synchronization, identical and generalized, have 
been observed (l^ Il3 |. In our experiments we have 
focused on the identical synchronization, (which is 
isochronal) i.e. the two lasers receive the same total feed- 
back intensities [l5l |. 

We compare mutual versus unidirectional coupling 



over a range of coupling and self feedback strengths, de- 
noted a and k respectively. In the experiment the total 
feedback intensity is such that it results in the reduction 
of the solitary laser's threshold current by approximately 
5%. While keeping the total feedback of all lasers equal, 
we vary the values of a and k over the entire param- 
eter space. The degree of synchronization between the 
lasers is evaluated via the cross-correlation function [ll| . 
The time dependent intensity traces are divided into 10ns 
segments (containing 10 sample points) and the overlap 
between matching segments is calculated and arranged 
in a histogram. We find that for mutual coupling ro- 
bust and stable synchronization is obtained at least from 
K = 2 • CT to K = 0.5 • cr (see also ref. [11]). For the case 
of unidirectional coupling, good synchronization is found 
for K = but it deteriorates quickly as we increase the 
part of K in the total feedback [ij| . 

In Fig. |21we show a representative point in the param- 
eter phase space where mutual coupHng is advantageous 
over unidirectional coupling, by presenting a comparison 
of overlap histograms for 3 situations: mutual coupling 
K — 2 ■ a, unidirectional coupling k = 0, and unidirec- 
tional coupHng K — 2 ■ (J. While the first two show good 
synchronization with a mean value of 0.84, the third is 
significantly worse. 

The advantage of mutual coupling over unidirectional 
is also obtained in our numerical simulations. We calcu- 
late the system behavior using the Lang Kobayashi dif- 
ferential equations, as defined in [13I (and also in Eq. [1] 
below, when taking M = 0). For the dynamics parame- 
ters we used the values in [i3| , and the two Lasers A and 
B were found to be synchronized isochronally |lll Il5l | . 

We now discuss the two dimensional phase space, de- 
fined by parameters k and a of lasers A and B and the 
attacker to either A ox B. This phase space is character- 
ized by the following three regimes as depicted in Fig. HI 
The red regime where a is strong enough in comparison 
to K, and all lasers are synchronized. The black regime 
where the coupling is negligible and there is a lack of 



synchronization between any of the lasers. Most inter- 
esting is the window of the Hght blue regime where A 
and B are synchronized, but C fails to synchronize (we 
define failure when the average correlation is less than 
0.7). It is in this regime that mutual coupling is superior 
to unidirectional coupling, thus even if laser C uses the 
exact same parameters as lasers A and B, the fact that 
he is not mutually coupled to A or i? but only listening, 
affects his synchronization ability. This new effect has 
been observed in other chaotic systems as well [la| and 
is at the center of our proposed cryptographic system 
presented below. Note that if the attacker amplifies the 
coupling signal and uses a stronger a (outside the light 
blue regime) such as (Jattacker = n + a oioi A and B, he 
manages to synchronize very well. However, in the cryp- 
tographic system we propose, such synchronization does 
not allow the attacker to reliably decode the message. 

In our proposed MCPF cryptography system, each 
laser transmits a signal to the other laser that consists 
of the original chaotic laser signal with some added low 
amplitude message signal. Our simulations show that 
synchronization is possible even in the presence of the 
added message. In the Lang-Kobayashi equations the 
added message is represented by another term Mj^^^it) 
in the first two equations which is time dependent and 
different for lasers A and B. The dynamics of laser A 
are thus given by the following coupled differential equa- 
tions for the optical field, E, the optical phase $, and the 
excited state population, n; 

-dT = 2^^"^^^^') + 2EAt) 

+KEAit - t)cos[ujqt + $A(i) ~^A{t~ t)] 
+a{EBit-T) + MBit-T)) 
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and Hkewise for laser B. We obtain that for a wide 
range of values of n and a the two lasers achieve sta- 
ble isochronal synchronization, despite the fact that each 
laser is receiving an additional and different time depen- 
dent message. This message Ma^ sent from A to B, is 
recovered by laser B via a chaos pass filter procedure, as 
Ma by subtracting his output from the received input in 
the following manner: Ma — Ea + Ma — Eb, and then 
averaged over Ins windows, giving the recovered message 
as < Ma >■ The same method is used by the other laser. 
When considering the security of this public crypto- 




Figure 4: A trace of the message sequence sent from laser A 
to B (black), that consists of 111001110001101, the recovered 
message by B (red), and the recovered message by the attacker 
(green). The parameters used by A and B are: k = 11 ■ 
lO^^s"^, cr = 4 • lO'^^s"^. The attacker amplifies the coupling 
signal to a maximum and uses k = 0, cr = 15 ■ 10 s~ . 



graphic system we consider an attacker who is "listening" 
to the communication channel and wishes to decipher the 
secret messages that are transmitted. When the commu- 
nicating lasers use coupling strength values in the "light 
blue regime" of Fig. 1^1 an attacker who uses the same 
parameters fails to synchronize and hence cannot recover 
the message correctly. His best chance to synchronize 
is by adjusting his parameters to the red region in Fig. 
El where he amplifies the coupling signal strength a and 
weakens his self-feedback strength k. In this case he suc- 
ceeds in synchronizing, as we already explained above, 
but he still fails to decipher the message. The reason 
for his failure is that the coupling signal consists both 
of a fraction of the laser's signal, E, and the message, 
M, and so the attacker amplifies the message as well as 
the laser's signal. Hence, the message/signal ratio for 



the attacker. 



M 



(1+ 



)<E>- 



is greater than the mes- 
sage/signal ratio for the parties, ^ , i^^^^ UM- This 

difference in the message/signal ratio causes the attacker 
to have more errors in his recovered message. Therefore 
when the attacker amplifies the coupling signal and uses 
a stronger a, he does not manage to recover the message 
to the same extent as the parties and we thus conclude 
that no matter where in the k/ct phase space the attacker 
works, he deciphers the message incorrectly. 

Fig. displays the traces of the message sent by A, 
the message recovered by B, and the message recovered 
by the attacker, for an attacker using a maximal coupling 
signal a. One can observe that the attacker's recovered 
message, although generally following the original mes- 
sage, has several mistakes even in this short sequence. 
When sending compressed data, even several mistakes 
can corrupt the entire message. An accepted measure of 
the ability to recover a message successfully is the Bit 
Error Rate (BER), the probability of a bit to be decoded 
erroneously |]Lq|. 



We measured the BER of the communicating lasers 
for many different points in the "Ught blue regime", for 
which there is a strong self- feedback. For every point we 
examined we looked for the "best" possible k,(t values 
for the attacker, in the entire space (k, a)^ that gives him 
the minimal BER value [l3|- For all the parameters we 
checked, the BER of lasers A and B was considerably 
smaller than the BER of the best attacker. For example: 
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where < Ea/b > is the average amplitude of the laser 
signal, and the Kattacker and (Tattacker appearing in the 
table are the values that minimize the BER of the at- 
tacker. The added message was changed randomly every 
Ins, giving a rate of IGbits/s. It is clear that the BER of 
the attacker is few orders of magnitude higher than the 
BER of the parties. Hence, while a compressed block (for 
instance of lOKbits) is recovered properly with high prob- 
ability by the parties, the attacker has many (0(10'^)) er- 
ror bits. By reducing the transmission rate, for instance. 



and transmitting a bit every 3ns (a 1/3 Gbit/s rate), the 
BER of the parties can be reduced, and the gap between 
the BERa/b/ BERattacker is enhanced. 

Note that if the two communicating lasers use the same 
K and a as the optimal attacker in the examples above 
(k = 3 • 10^°s-\ a = 9 ■ 10i°s-i or k = 7 • IQi'^s-i, 
cr = 8 • 10i°s-i), they also have BER - 10-^. Hence 
working in the light blue regime provides two advantages: 
the BER in this region is considerably smaller, and the 
mutual coupling is superior to the unidirectional. 

We checked that the synchronization of the mutually 
coupled lasers is robust under different message signals, 
such as a "noisy" message, which was also recovered cor- 
rectly using the MCPF. Finally, we considered an at- 
tacker who listens to both communication directions, us- 
ing the coupling signal of both A to B and B to A, and 
found this attacker to be unsuccessful. 

To conclude, we have presented a public-channel cryp- 
tographic system, based on two mutually coupled lasers 
in a MCPF procedure. Encryption security is based on 
the experimentally demonstrated advantage of mutual 
coupling over unidirectional coupling. This system is 
novel in several aspects: It is an optical communication 
system that is public and does not require a secret-key, 
it enables two-directional message flow, and the security 
is not limited by a small key-space, as in the case of 
unidirectional CPF. The system proposed here opens a 
manifold of possibilities, for instance: the extension to 
generate secret communication among a group of more 
than two lasers. 
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